diff options
author | Fred Barclay <Fred-Barclay@users.noreply.github.com> | 2017-08-13 15:07:29 -0500 |
---|---|---|
committer | GitHub <noreply@github.com> | 2017-08-13 15:07:29 -0500 |
commit | ea8312bf0a5a334cba9d332dc0f0cce3b967d12d (patch) | |
tree | 7110249a1cbf5dceb263d7e93ae635817ce7fe59 /etc/Xvfb.profile | |
parent | Merge pull request #1444 from SpotComms/h2 (diff) | |
parent | Fix nodvd placement (diff) | |
download | firejail-ea8312bf0a5a334cba9d332dc0f0cce3b967d12d.tar.gz firejail-ea8312bf0a5a334cba9d332dc0f0cce3b967d12d.tar.zst firejail-ea8312bf0a5a334cba9d332dc0f0cce3b967d12d.zip |
Merge pull request #1466 from SpotComms/fixnd
Fix nodvd placement
Diffstat (limited to 'etc/Xvfb.profile')
-rw-r--r-- | etc/Xvfb.profile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/Xvfb.profile b/etc/Xvfb.profile index 69420c3a8..7921e0d06 100644 --- a/etc/Xvfb.profile +++ b/etc/Xvfb.profile | |||
@@ -23,6 +23,7 @@ include /etc/firejail/whitelist-common.inc | |||
23 | 23 | ||
24 | caps.drop all | 24 | caps.drop all |
25 | # Xvfb needs to be allowed access to the abstract Unix socket namespace. | 25 | # Xvfb needs to be allowed access to the abstract Unix socket namespace. |
26 | nodvd | ||
26 | nogroups | 27 | nogroups |
27 | nonewprivs | 28 | nonewprivs |
28 | # In noroot mode, Xvfb cannot create a socket in the real /tmp/.X11-unix. | 29 | # In noroot mode, Xvfb cannot create a socket in the real /tmp/.X11-unix. |
@@ -40,4 +41,3 @@ private | |||
40 | private-dev | 41 | private-dev |
41 | private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname | 42 | private-etc ld.so.conf,ld.so.cache,resolv.conf,host.conf,nsswitch.conf,gai.conf,hosts,hostname |
42 | private-tmp | 43 | private-tmp |
43 | nodvd | ||